Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
87.275exploits catalogados
40.621CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.377Exploit-DB 24.489GitHub PoC 18.124VulnCheck XDB 10.169Nuclei 4577Metasploit 3539✓ solo verificadosrecientespopularesriesgo
24.489 exploits
Exploit-DB✓ VexDay Proof
Qualiteam X-Cart 4.0.8 - 'home.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPMailer 1.7 - 'Data()' Remote Denial of Service
The Data function in class.smtp.php in PHPMailer 1.7.2 and earlier allows remote attackers to cause a denial of service
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Hosting Controller 6.1 - 'resellerresources.asp?jresourceid' SQL Injection
SQL injection vulnerability in resellerresources.asp in Hosting Controller 6.1 Hotfix 2.0 allows remote attackers to exe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NPDS 4.8 < 5.0 - 'faq.php?categories' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NPDS 4.8 < 5.0 - 'powerpack_f.php?language' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NPDS 4.8 < 5.0 - 'reply.php?image_subject' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NPDS 4.8 < 5.0 - 'sdv_infos.php?sitename' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Invision Power Board 1.x - Unauthorized Access
Invision Power Board (IPB) 1.0 through 1.3 allows remote attackers to edit arbitrary forum posts via a direct request to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NPDS 4.8 < 5.0 - 'reviews.php?title' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NPDS 4.8 < 5.0 - 'links.php?Query' SQL Injection
Multiple SQL injection vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to execute arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OS4E - 'login.asp' SQL Injection
SQL injection vulnerability in login.asp in an unknown product by Online Solutions for Educators (OS4E) allows remote at
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NPDS 4.8 < 5.0 Glossaire Module - 'terme' SQL Injection
Multiple SQL injection vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to execute arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Hosting Controller 6.1 - 'plandetails.asp' Information Disclosure
SQL injection vulnerability in resellerresources.asp in Hosting Controller 6.1 Hotfix 2.0 allows remote attackers to exe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NPDS 4.8 < 5.0 - 'admin.php?language' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Jaws Glossary 0.4/0.5 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Jaws Glossary gadget 0.4 to 0.5.1 allows remote attackers to inject arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Hosting Controller 0.6.1 - User Registration (3)
Hosting Controller 6.1 HotFix 2.0 and earlier allows remote attackers to steal passwords and gain privileges via a modif
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Invision Power Board 2.0.3 - 'login.php' SQL Injection (Tutorial)
SQL injection vulnerability in Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to execute arbitrary
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BookReview 1.0 - 'search.htm?submit string' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in BookReview beta 1.0 allow remote attackers to inject arbitrary we
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BookReview 1.0 - 'suggest_review.htm?node' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in BookReview beta 1.0 allow remote attackers to inject arbitrary we
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - Cryptoloop Information Disclosure
cryptoloop on Linux kernel 2.6.x, when used on certain file systems with a block size 1024 or greater, has certain "IV c
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Maxwebportal 1.36 - 'Password.asp' Change Password (1) (HTML)
SQL injection vulnerability in password.asp in MaxWebPortal 1.35, 1.36, 2.0, and 20050418 Next allows remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BookReview 1.0 - 'add_booklist.htm?node' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in BookReview beta 1.0 allow remote attackers to inject arbitrary we
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Maxwebportal 1.36 - 'Password.asp' Change Password (3)
SQL injection vulnerability in password.asp in MaxWebPortal 1.35, 1.36, 2.0, and 20050418 Next allows remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BookReview 1.0 - 'contact.htm?user' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in BookReview beta 1.0 allow remote attackers to inject arbitrary we
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Maxwebportal 1.36 - 'Password.asp' Change Password (2)
SQL injection vulnerability in password.asp in MaxWebPortal 1.35, 1.36, 2.0, and 20050418 Next allows remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Nokia 9500 - vCard Viewer Remote Denial of Service
The vCard viewer in Nokia 9500 allows attackers to cause a denial of service (crash) via a vCard with a long Name field,
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BookReview 1.0 - 'suggest_category.htm?node' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in BookReview beta 1.0 allow remote attackers to inject arbitrary we
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Gentoo Webapp-Config 1.10 - Insecure File Creation
The fn_show_postinst function in Gentoo webapp-config before 1.10-r14 allows local users to overwrite arbitrary files vi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BookReview 1.0 - 'add_contents.htm' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in BookReview beta 1.0 allow remote attackers to inject arbitrary we
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BookReview 1.0 - 'add_url.htm?node' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in BookReview beta 1.0 allow remote attackers to inject arbitrary we
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.